PT-2001-2403 · Mysql Server · Mysql Server

Published 2001-01-19 · Updated 2019-10-07 · CVE-2001-1275

Positive Technologies (AI Summary)

CVSS v2.0

7.2

High

Base vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions: MySQL versions prior to 3.23.31

Description: The issue allows users with a MySQL account to use the SHOW GRANTS command to obtain the encrypted administrator password from the mysql.user table. This could potentially allow them to gain privileges via password cracking.

Recommendations: For versions prior to 3.23.31, update to version 3.23.31 or later to resolve the issue.

Fix

Related Identifiers

CVE-2001-1275

Affected Products

Mysql Server

References · 5

• http://marc.info/?l=bugtraq&m=98089552030459&w=2 · Vendor Advisory
• http://calderasystems.com/support/security/advisories/CSSA-2001-006.0.txt · Vendor Advisory
• http://linux-mandrake.com/en/security/2001/MDKSA-2001-014.php3 · Vendor Advisory
• http://redhat.com/support/errata/RHSA-2001-003.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2001-1275 · Security Note